diff --git a/k8s/zero/service/proxy.yaml b/k8s/zero/service/proxy.yaml
index 3e1df1f5e..5d4275aeb 100644
--- a/k8s/zero/service/proxy.yaml
+++ b/k8s/zero/service/proxy.yaml
@@ -4,6 +4,7 @@ metadata:
   name: pomerium-proxy
 spec:
   type: LoadBalancer
+  externalTrafficPolicy: Local
   ports:
     - port: 443
       targetPort: https